1 / 13

In 60 Days – ICND2

In 60 Days – ICND2. Configuring Access Lists. Standard IP ACLs. Source network or Source host IP. Source: 172.16.1.1 Destination: 192.168.1.1 Port 80. Router(config)#access-list 1 permit host 172.16.1.1 Router(config)#access-list 1 permit host 192.168.1.1

belle
Download Presentation

In 60 Days – ICND2

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. In 60 Days – ICND2 Configuring Access Lists

  2. Standard IP ACLs • Source network or • Source host IP Source: 172.16.1.1 Destination: 192.168.1.1 Port 80

  3. Router(config)#access-list 1 permit host 172.16.1.1 Router(config)#access-list 1 permit host 192.168.1.1 Router(config)#access-list 1 permit 10.1.0.0 0.0.255.255 [Deny All]

  4. Extended ACLs • Source/destination address • Source/destination port • Protocols • Services (e.g. ICMP)

  5. Syntax Access list 100 permit/deny service from to port access-list 101 deny tcp 10.1.0.0 0.0.255.255 host 172.30.1.1 eqtelnet access-list 100 permit tcp 10.1.0.0 0.0.255.255 host 172.30.1.1 eqftp access-list 100 permit icmp any any

  6. access-list 100 permit tcp host 172.16.1.1 host 172.20.1.1 eqsmtp access-list 100 permit tcp 10.1.0.0 0.0.255.255 host 172.30.1.1 eq ftp access-list 100 permit tcp host 192.168.1.1 host 172.30.1.1 eq www

  7. access-list 101 deny icmp any 172.20.0.0 0.0.255.255 access-list 101 deny tcp 10.1.0.0 0.0.255.255 host 172.30.1.1 eq telnet

  8. access-list 102 permit tcp any host 172.30.1.1 eq ftp established

  9. Named ACL • Slightly different syntax • Can edit (add/remove lines)

  10. Router(config)#ip access-list extended BlockWEB Router(config-ext-nacl)#deny tcp any anyeq 80

  11. Applying ACLs • Apply to ports or interfaces Router(config)#int fast 0/0 Router(config-if)#ip access-group 101 in ------ Router(config)#line vty 0 15 Router(config-line)#access-class 101------ Router(config)#int fast 0/0 Router(config-if)#ip access-group BlockWEB in

  12. End

More Related